AgentPostmortem/MCP-audit

The Engine takes injected rules, but there is no way for a user to supply one about 1 hour ago

enhancement help wanted

0

Security scanner and linter for MCP servers. npx mcp-audit <target>: 18 rules, SARIF output for GitHub code scanning.

TypeScript

#ai-security#cli#mcp#model-context-protocol#sarif#scanner#typescript

The linter has no linter: npm run lint is just tsc, and CI never runs it about 1 hour ago

enhancement good first issue

AgentPostmortem/MCP-audit

0

Security scanner and linter for MCP servers. npx mcp-audit <target>: 18 rules, SARIF output for GitHub code scanning.

TypeScript

#ai-security#cli#mcp#model-context-protocol#sarif#scanner#typescript

The HTTP transport and the entire CLI layer are untested, and that is where five open bugs live about 1 hour ago

enhancement help wanted

AgentPostmortem/MCP-audit

0

Security scanner and linter for MCP servers. npx mcp-audit <target>: 18 rules, SARIF output for GitHub code scanning.

TypeScript

#ai-security#cli#mcp#model-context-protocol#sarif#scanner#typescript

No timeouts anywhere: a server that stalls listTools hangs the audit forever about 1 hour ago

bug enhancement help wanted

AgentPostmortem/MCP-audit

0

Security scanner and linter for MCP servers. npx mcp-audit <target>: 18 rules, SARIF output for GitHub code scanning.

TypeScript

#ai-security#cli#mcp#model-context-protocol#sarif#scanner#typescript

The CLI silently ignores unknown flags, so a typo in --fail-on disables the gate about 1 hour ago

bug enhancement help wanted

AgentPostmortem/MCP-audit

0

Security scanner and linter for MCP servers. npx mcp-audit <target>: 18 rules, SARIF output for GitHub code scanning.

TypeScript

#ai-security#cli#mcp#model-context-protocol#sarif#scanner#typescript

MCP030 raises a critical finding on the word credentials in a resource description about 1 hour ago

bug good first issue

AgentPostmortem/MCP-audit

0

Security scanner and linter for MCP servers. npx mcp-audit <target>: 18 rules, SARIF output for GitHub code scanning.

TypeScript

#ai-security#cli#mcp#model-context-protocol#sarif#scanner#typescript

Bug: mcp-audit --version prints usage and exits 2 about 1 hour ago

bug good first issue

AgentPostmortem/MCP-audit

0

Security scanner and linter for MCP servers. npx mcp-audit <target>: 18 rules, SARIF output for GitHub code scanning.

TypeScript

#ai-security#cli#mcp#model-context-protocol#sarif#scanner#typescript

MCP031 misses path arguments nested inside objects or arrays about 2 hours ago

bug help wanted

AgentPostmortem/MCP-audit

0

Security scanner and linter for MCP servers. npx mcp-audit <target>: 18 rules, SARIF output for GitHub code scanning.

TypeScript

#ai-security#cli#mcp#model-context-protocol#sarif#scanner#typescript

Unknown rule ids in --only / --disable / severityOverrides are silently ignored about 2 hours ago

enhancement help wanted

AgentPostmortem/MCP-audit

0

Security scanner and linter for MCP servers. npx mcp-audit <target>: 18 rules, SARIF output for GitHub code scanning.

TypeScript

#ai-security#cli#mcp#model-context-protocol#sarif#scanner#typescript

CLI version is hardcoded in src/cli.ts and has drifted from package.json about 2 hours ago

enhancement good first issue

AgentPostmortem/MCP-audit

0

Security scanner and linter for MCP servers. npx mcp-audit <target>: 18 rules, SARIF output for GitHub code scanning.

TypeScript

#ai-security#cli#mcp#model-context-protocol#sarif#scanner#typescript

Bug: --header is documented as repeatable but only the last one is sent about 2 hours ago

bug help wanted

AgentPostmortem/MCP-audit

0

Security scanner and linter for MCP servers. npx mcp-audit <target>: 18 rules, SARIF output for GitHub code scanning.

TypeScript

#ai-security#cli#mcp#model-context-protocol#sarif#scanner#typescript

Open Issues Need Help